Who is responsible for your data
The data controller for Bachata Studio is TheTotalFocus, a sole proprietorship registered at Ludwiki 4b, 01-226 Warsaw, Poland. This is the same entity behind thetotalfocus.com.
You can reach us anytime about privacy at support@thetotalfocus.com or +48 733 867 905.
Information We Collect
We collect only what we need to run the service, bill it, and improve it.
Account information
When you create an account we store your email address, your display name, and your @handle. We use these to sign you in, identify your account, and contact you about your subscription and the service.
Content you create
As you use Bachata Studio you create content that we store on your behalf, including:
- Song flows you build
- Your figure library, including any videos you upload (stored in Convex file storage)
- Offers you propose on the Make an offer page (/offer) and any messages exchanged with us about them
This content is yours. We store and process it so the app can show it back to you and so features like practice games work.
Payment information
Payments are handled by Stripe. In connection with a purchase we and Stripe process your name, email, billing details, and transaction details (such as amount, currency, plan type, and payment status). We do not store your full card number on our systems; Stripe holds your card data as the payment processor.
Product-usage analytics
To understand how the app is used and where to improve it, we collect product-usage analytics through PostHog. This includes events such as pages viewed and features used, together with technical data like device and browser type and approximate location derived from your IP address. Whether analytics run for you depends on your region and your cookie choice, described under Cookies below.
Cookies and Similar Technologies
We use two categories of cookies and similar technologies. We are not cookie-free.
Essential cookies (always on)
Essential cookies keep you signed in and maintain your session, and support Stripe fraud prevention and payment processing. These are required for the service to work, so they are always on and cannot be switched off while you use the app.
Product-analytics cookies (consent-gated, geo-differentiated)
Product-analytics cookies (PostHog) are handled differently depending on where you are:
- If you are in the EU/EEA or the UK, analytics are off by default and only turn on after you accept them in our cookie banner. You can decline, and you can withdraw your consent at any time from Cookie settings.
- If you are outside the EU/EEA and the UK, analytics are on by default, and you can opt out at any time from Cookie settings.
Whatever your region, you stay in control: Cookie settings lets you turn product analytics on or off at any time.
How We Use Your Information
We use your information to:
- Provide the service — create and secure your account, store and display your flows, figures, and videos, and run features like practice games
- Process payments, subscriptions, one-time purchases, offers, refunds, and cancellations
- Communicate with you about your account, billing, changes to the service, and support requests
- Understand and improve how the app is used, through product analytics where permitted
- Keep the service safe — prevent fraud and abuse and protect the integrity of the platform
- Meet our legal, accounting, and tax obligations
Legal bases (GDPR)
We rely on: performance of our contract with you (to provide the service and process your purchases); your consent (for product analytics where consent is required, which you can withdraw at any time); our legitimate interests (to secure, maintain, and improve the service); and compliance with legal obligations (such as billing and tax record-keeping).
How We Share Your Information
We do not sell your personal data. We share it only with the service providers (processors) that help us run Bachata Studio, and only as needed:
- Stripe, Inc. (USA) — payment processing, billing, and fraud prevention
- Convex, Inc. (USA) — backend, database, account data, and file storage for your uploaded content
- Vercel, Inc. (USA) — hosting and delivery of the web app
- PostHog, Inc. (USA) — product analytics (PostHog Cloud US), where enabled
Each of these providers processes data on our instructions under a data processing agreement. We may also share data with professional advisers (such as accountants) and where required by law, as described next.
Legal Requirements
We may disclose your information where we are required to do so by law, or where we reasonably believe disclosure is necessary to comply with a legal obligation, respond to a lawful request from a public authority, enforce our terms, or protect the rights, safety, and property of our users, the public, or us.
Data Retention
We keep your account and content data for as long as your account is active. If you close your account, we delete or anonymise your personal data within a reasonable period, except where we must keep certain records longer.
In particular, billing, transaction, and tax records are retained for approximately seven years, in line with Polish accounting and tax law. We retain them for that period even after you close your account.
Your GDPR Rights
If you are in the EU/EEA (and, under comparable UK rules, in the UK), you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase your data (the right to be forgotten), where applicable
- Restrict or object to certain processing
- Data portability — receive your data in a portable format
- Withdraw consent at any time, where processing is based on consent (this does not affect processing done before you withdrew)
To exercise any of these rights, email us at support@thetotalfocus.com. We will respond within 30 days (one month), as required by the GDPR. Exercising your rights is free; we may charge a reasonable fee or decline only where a request is manifestly unfounded or excessive.
Complaint to a Supervisory Authority
If you believe we have mishandled your personal data, we would like the chance to put it right — please contact us first. You also have the right to lodge a complaint with the Polish data protection authority, the President of the Personal Data Protection Office (Urzad Ochrony Danych Osobowych, UODO):
- Website: https://uodo.gov.pl
- Email: kancelaria@uodo.gov.pl
International Data Transfers
Some of our processors (Stripe, Convex, Vercel, and PostHog) are based in the United States, so your data may be transferred to and processed there. Where this happens, we rely on appropriate safeguards under the GDPR — the EU-U.S. Data Privacy Framework (and its UK extension) where the provider is certified, and/or the European Commission's Standard Contractual Clauses — together with the provider's data processing agreement.
Children
Bachata Studio is not intended for children under 16. In Poland, 16 is the minimum age to consent to online services under the GDPR, so you must be at least 16 to hold an account. We do not knowingly collect personal data from children under 16 without the consent of a parent or legal guardian. If you believe a child under 16 has provided us personal data without that consent, contact us at support@thetotalfocus.com and we will address it.
Data Security
We take reasonable technical and organisational measures to protect your data. Traffic to and from the app is encrypted in transit using TLS. Payment card data is handled by Stripe, a PCI-DSS compliant payment processor, and is not stored on our own systems. No method of transmission or storage is completely secure, but we work to protect your information and to keep our providers held to strong security standards.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will change the Last updated date at the top, and for significant changes we will give you additional notice, such as by email or an in-app notice. Your continued use of Bachata Studio after an update means you accept the revised policy.
Contact
Questions, requests, or concerns about your privacy? We are happy to help.
- Controller: TheTotalFocus
- Address: Ludwiki 4b, 01-226 Warsaw, Poland
- Email: support@thetotalfocus.com
- Phone: +48 733 867 905
You can also review our Terms and refund policy at /terms and manage your analytics choices at any time from Cookie settings.